release: v1.2.1 - #8322
Conversation
|
Important Review skippedAuto reviews are disabled on base/target branches other than the default branch. Please check the settings in the CodeRabbit UI or the You can disable this status message by setting the ✨ Finishing touches🧪 Generate unit tests (beta)
Thanks for using CodeRabbit! It's free for OSS, and your support helps us grow. If you like it, consider giving us a shout-out. Comment |
There was a problem hiding this comment.
Pull request overview
This release removes Next.js as a transitive dependency to address security concerns. The codebase uses React Router for routing (not Next.js), but was pulling in Next.js through the next-themes package. The PR upgrades next-themes to version 0.4.6, which no longer requires Next.js as a peer dependency, and removes the Next.js override from the root package configuration.
- Updates
next-themesfrom ^0.2.1 to 0.4.6 (pinned) across all apps, removing Next.js peer dependency - Removes Next.js override from root package.json
- Cleans up all Next.js-related packages and transitive dependencies from pnpm-lock.yaml
Reviewed changes
Copilot reviewed 4 out of 5 changed files in this pull request and generated no comments.
Show a summary per file
| File | Description |
|---|---|
| package.json | Removes next: "16.0.7" from pnpm overrides section |
| apps/web/package.json | Updates next-themes to exact version 0.4.6 (from ^0.2.1) |
| apps/space/package.json | Updates next-themes to exact version 0.4.6 (from ^0.2.1) |
| apps/admin/package.json | Updates next-themes to exact version 0.4.6 (from ^0.2.1) |
| pnpm-lock.yaml | Removes Next.js packages (@next/*, next@14.2.32), dependencies (styled-jsx, busboy, streamsearch, @swc/helpers@0.5.5, postcss@8.4.31), and updates next-themes snapshots to remove Next.js peer dependency |
Files not reviewed (1)
- pnpm-lock.yaml: Language not supported
💡 Add Copilot custom instructions for smarter, more guided reviews. Learn how to get started.
🛡️ Security